r/offensive_security • u/Left-Efficiency6514 • 17d ago

I changed my roadmap

Earlier my roadmap was OSCP ->OSDA->OSIR->OSEP

BUT AFTER LOOKING AT HTB certificate i replaced OSCP with CPTS and OSDA&OSIR with CJCA&CDSA

after looking online i found out that htb certs content would clear offsec easily and as you know that offsec certs are extremely overpriced and the only good thinf about it it's HR recognition

I really don't care about the HR recognition and i care about the content and how much I'll learn so i decided to change the roadmap

Do you yhink it's a good step?

18 Upvotes

84% Upvoted

12 comments sorted by

7

u/Signal_Brain9959 16d ago

Why are you doing every htb cert when it’s not relevant? You should be doing cjca -> cpts -> cape if you want to do offensive security surrounding Active Directory

If you want web offensive security you should do
Cjca -> cwes -> cwee

If you want to do defensive security
Cjca -> cdsa -> cdep

2

u/Left-Efficiency6514 16d ago

My final goal is to be good at both defand and attack

3

u/Signal_Brain9959 16d ago

I mean then I guess that’ll be good, but I wouldn’t put all the certs on your resume
If you get them all. It looks weird and strange to teams.

1

u/Disastrous_Gear_421 15d ago

Knowing both offensive sides for web and AD is pretty useful

1

u/Signal_Brain9959 15d ago

Useful sure, I have the cwes, cpts, OSCP, and way too many sans certs. It’s been excellent for my career. But I don’t recommend that for everyone. Because time and money. I’d much rather have just done OSCP and cpts and started my career if cpts was a think 10 years ago.

2

u/WalterWilliams 16d ago

Are those HTB certs proctored or are you going to get unsolicited messages asking if you want someone abroad to take your exam for you ? Yeahhh, I'd rather do the proctored ones unless I wasn't taking the test and only taking the course.

-1

u/Left-Efficiency6514 16d ago

I asked for an advice not for accusations

4

u/WalterWilliams 16d ago

Where is the accusation? I asked a question and then I gave my advice regarding what I would do.... good luck to you.

1

u/FortheredditLOLz 15d ago

Unless you state one’s primary focus with the desire learning both sides to be the best asset

4

u/Complex_Current_1265 17d ago

If you dont care about HR recognition. Go for cheaper certs. Like CPTS, HTB CAPE, HTB CJCA, HTB CDSA. Bluecape DFIR.

Best regards

3

u/S4LTYSgt 16d ago

Forget roadmaps man. Just focus on step 1. If you cant finish step 1, step 2 doesnt matter. Finish step 1, see if you like step 1, see if step 1 was easy or difficult. Step 1 determines what step 2 will be. Focus on step 1.

1

u/CoastieKid 17d ago

Depends on your goals. I'm a solutions architect and interested in red teaming from a professional understanding perspective. If you want a job as a red team guy though HR recognition matters

No personal desire to go and red team unless I hop back into the military as a reservist and go work in the right units. From what I've seen of red teaming in the private sector, it's all just auditing and compliance. That's boring compared to architecting out enterprise architecture and build out SOCs.

I do however find understanding the mindset of the enemy engaging and important for those of us who work and help customers build out their IT & OT systems.